Description

Cross-site scripting (XSS) vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page.

Remediation

References

http://vaadin.com/download/release/6.4/6.4.9/release-notes.html

http://dev.vaadin.com/ticket/6257

http://www.securityfocus.com/bid/45779

http://osvdb.org/70398

http://secunia.com/advisories/42879

https://exchange.xforce.ibmcloud.com/vulnerabilities/64626

Related Vulnerabilities

CVE-2016-6812 Vulnerability in maven package org.apache.cxf:cxf-rt-transports-http

CVE-2022-34183 Vulnerability in maven package io.jenkins.plugins:agent-server-parameter

CVE-2017-12795 Vulnerability in maven package org.openmrs.module:htmlformentry-omod

CVE-2021-25979 Vulnerability in npm package apostrophe

CVE-2020-11022 Vulnerability in npm package jquery

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory Issue Tracking Third Party Advisory VDB Entry Broken Link